CVE-2020-10117

CRITICAL 9.1CVE-2020-10117 · Published 17/03/2020 · updated 17/06/2026

In short

CVE-2020-10117 is a CRITICAL (CVSS 9.1) vulnerability affecting cpanel (cpanel).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.1% of all vulnerabilities.
Fix: update to 78.0.45, 84.0.20 or later.

Package	Affected versions	Patched versions
cpanel cpanel	`≥ 77.9999.110, < 78.0.45≥ 83.9999.115, < 84.0.20`	`78.0.4584.0.20`

cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.